Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a2e4be36-f5b9-3ca1-8bef-23ee68029479.roa
File:                     a2e4be36-f5b9-3ca1-8bef-23ee68029479.roa (raw, json)
Hash identifier:          p5UoL58lwKO09lVpDOC6XYcHOfcek0AXsjcL9fdi4jY=
Subject key identifier:   A3:07:52:52:A3:BD:41:8E:FD:48:9C:CA:41:AB:70:F7:8D:EA:25:B5
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DAE4AA1B6801E696E6F00
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a2e4be36-f5b9-3ca1-8bef-23ee68029479.roa
Signing time:             Thu 06 Aug 2026 20:23:31 +0000
ROA not before:           Thu 06 Aug 2026 20:23:31 +0000
ROA not after:            Wed 04 Nov 2026 21:23:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:12e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ae:4a:a1:b6:80:1e:69:6e:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:31 2026 GMT
            Not After : Nov  4 21:23:31 2026 GMT
        Subject: CN=6d4b5cd6-056c-4e75-9eae-dbfc697d81e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:85:4a:81:84:ee:0a:7b:b2:5a:ee:97:92:
                    1d:88:d2:ea:8e:88:3e:0a:82:2b:f1:ac:36:6f:68:
                    ed:a2:ec:fd:1d:45:75:55:24:e1:6a:96:17:09:91:
                    66:3a:7a:e0:be:d2:ee:18:f7:d6:ae:13:ea:55:74:
                    67:7f:ca:cb:02:96:7f:18:c2:f5:6d:0e:0a:58:54:
                    f6:47:7e:13:41:66:a3:d5:18:8b:33:0b:f7:f0:35:
                    3b:5e:64:f8:32:74:bd:09:41:63:06:f8:fd:46:01:
                    e1:54:aa:95:18:36:d1:eb:ca:b3:5a:67:77:f0:b6:
                    44:4c:b7:37:d8:9c:81:ac:f4:1b:f0:b9:0e:51:c8:
                    49:13:e6:08:1a:56:8e:7b:e1:7f:0f:15:35:9d:cb:
                    de:42:ff:4d:7d:fd:c9:5a:28:e0:2b:00:53:18:c6:
                    2b:79:af:35:c7:98:4c:a0:67:5d:94:e7:5a:87:98:
                    ea:c1:0e:c7:23:da:41:21:29:f0:53:7d:c6:bd:7d:
                    e4:c5:44:02:4d:69:55:cb:72:c1:3a:46:96:b5:e3:
                    79:80:cb:5c:a2:64:5a:af:7b:b6:7b:21:15:6e:a0:
                    94:5b:ec:66:13:5a:13:9e:30:2b:e4:3e:9b:04:cf:
                    0a:e7:ca:79:13:a6:00:aa:9b:56:4b:e9:22:5f:0b:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:52:52:A3:BD:41:8E:FD:48:9C:CA:41:AB:70:F7:8D:EA:25:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a2e4be36-f5b9-3ca1-8bef-23ee68029479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:12e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:63:ac:dc:e9:54:3a:49:d9:6f:31:26:db:00:51:3c:90:
         0f:cc:24:c5:9e:6e:8e:a2:73:16:39:da:32:40:02:79:73:cf:
         85:60:d0:54:e9:31:56:40:c1:d2:3c:6b:eb:53:71:7e:58:44:
         4b:1b:c2:b6:a5:40:cd:6b:ef:92:b5:5d:ba:c3:be:60:d5:cd:
         30:b4:28:a6:de:1d:a4:d5:56:d0:6d:1c:15:30:78:de:3a:d6:
         2b:9a:87:a0:a1:a9:5a:1f:bc:6a:e5:80:26:e5:e9:c6:0b:ae:
         02:4f:09:be:38:92:82:f9:16:0e:e5:7a:32:05:e4:cb:45:02:
         f1:73:17:79:4e:bd:36:f8:cd:11:de:53:33:94:17:06:d1:72:
         53:d7:fc:89:b2:b8:13:21:d0:2f:86:3a:26:a4:45:31:3f:bb:
         5b:f5:c0:81:e6:49:28:a4:4d:96:89:49:f6:ef:35:8e:a8:5f:
         63:c2:3f:e1:60:cc:7f:3e:f9:17:8c:a8:bf:91:d8:78:62:53:
         e5:09:b2:2c:f6:53:51:de:b4:3a:e0:ea:5e:dd:2e:ea:8b:70:
         7f:8a:cf:6e:b4:6d:25:95:08:3b:f9:7d:d1:1c:38:71:80:0e:
         70:ef:e5:1e:f5:54:8c:12:f6:23:2c:55:94:07:98:4a:ec:ff:
         dc:ce:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:58 2026 by rpki-client